09-21-2011
[Solved] nfs share permissions with java
Please bare with me while I try to explain this weird problem.
We are exporting a filesystem from an aix box to two linux boxes.
On the linux box a java-weblogic application hits the share.
For explanation benefits I'll describe the users thus.
aix filesystem owned by userA in groupA
on the linux systems we made the same user
so the shared files are also owned by userA and groupA.
The uids and gids are the same across the systems.
The java - weblogic application is started and runs (supposedly) as userB GroupB
On the linux systems we put userB in GroupA also. ( userB primary group B, and also in group A )
This means that if I put a file in the linux shared filesystem that is owned by userA groupA, if the permissions are 660, UserB can still read the file because he is in groupA.
This bears out with my tests. I can vi the file.
The problem is that when the application runs and does some java call to read the file, it gets permission denied. It cannot read the file unless I make the file have world read permissions. (at least 664 ).
My only guess is that somewhere in the stack between the Java, Weblogic, application ears, there is another uid being set and it is NOT userB who is trying to read the file.
But this same exact setup works perfectly on in our QA environment which is built the same ( supposedly ). The developers told me that there is no difference in weblogic or java on either system so if it's not working in prod, there must be something else in the configuration.
I checked the uids, gids, etc.. and they all look the same between the two systems.
The /etc/vstab is the same on all linux boxes with no options.
Same with the /etc/exports file on the aix box.
Now I am lost and don't know where to look.
Does anyone have any ideas where else I can look or how I can go forth troubleshooting this issue ?
Thanks !
Floyd
---------- Post updated 09-21-11 at 10:39 AM ---------- Previous update was 09-20-11 at 05:57 PM ----------
Problem solved.
I dropped the group entry for userb into groupa and readded.
works as advertised now.
10 More Discussions You Might Find Interesting
1. Solaris
Hello,
I'm doing a Perl script to parse the dfstab file and find dangerous configurations (rw to everyone, root access, etc). My question is, if I have a share command like this:
share -F nfs -o ro=chrome:copper:zinc,root=chrome /usr/man
it means that the /usr/man is "rw" to everyone... (6 Replies)
Discussion started by: psimoes79
6 Replies
2. Red Hat
I got a problem while creating files on a NFS mounted share in a RHEL box. That is when I create an empty file, this is what appears on the screen
###############################################
E325: ATTENTION
Found a swap file by the name ".test.swp"
owned by: jsmith dated: Tue... (2 Replies)
Discussion started by: rcmrulzz
2 Replies
3. Red Hat
I can't seem to make sense of this.
$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 5.2 Beta (Tikanga)
$
$ mount
/dev/sda2 on / type ext3 (rw)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
/dev/sda1 on... (6 Replies)
Discussion started by: dfinn
6 Replies
4. OS X (Apple)
:confused:
Hi,
im a newbie with a mac osx problem: i can't share the DVD-drive of my macbook pro with NFS:
OSX 10.5.8:
My /etc/exports:
/Users/NFS -mapall=502 -ro -network 192.168.1.0 -mask 255.255.255.0
/Volumes/MIT_HERZ_UND_HAND/VIDEO_TS -maproot=502 -ro
the /Users/NFS share... (1 Reply)
Discussion started by: joker45
1 Replies
5. IP Networking
I have one machine "The server" ip: 192.168.1.1, it runs ubu 8.04(LTS) and - I have a folder (/shareme) that I want to share with other linux machines on my LAN.
- The server runs NFS server and common and portmap and so do the other machines on my LAN.
- The server has the export file with the... (2 Replies)
Discussion started by: fcron
2 Replies
6. UNIX for Advanced & Expert Users
Here is the scenario...
NFS share that is accessed every few minutes by approx 70 systems (AIX 5.3/6.1). Filesystem space is being eaten up rapidly according to df however du numbers really never change. lsof and fuser cannot see any unlinked files on either the NFS server or remote... (3 Replies)
Discussion started by: masterpengu
3 Replies
7. Red Hat
Hi,
I have an NFS server, i want to mount that nfs share which is having around 500GB to my client system. But my client system doesnt have any free space, is it possible to mount that nfs share in my client.
Regards,
Mastan (1 Reply)
Discussion started by: mastansaheb
1 Replies
8. UNIX for Dummies Questions & Answers
Hi,
I have created a NFS share in Solaris 10 server1 and mounted it on solaris 10 server 2.But I want to change owner of the files from nobody to a particular user in client.
Which command should I use. I have tried the following but it doesn't allow to change permissions in the server2 as... (0 Replies)
Discussion started by: Rossdba
0 Replies
9. Red Hat
I am having an issue with getting the proper group settings on NFS-shared directories.
NFS server, NFServe, nfs-shares hundreds of project directories...running Solaris 10 latest patches/updates.
SAS server, SAServe, statistical analysis server running on RedHat 7 with latest kernel/patches/etc.... (14 Replies)
Discussion started by: cjhilinski
14 Replies
10. Shell Programming and Scripting
I need a help of good people with effective bash script to mount nfs shared,
By the way I did the searches, since i haven't found that someone wrote a script like this in the past, I'm sure it will serve more people.
The scenario as follow:
An NFS Client with Daily CRON , running bash script... (4 Replies)
Discussion started by: Brian.t
4 Replies
LEARN ABOUT DEBIAN
libglpk-java
libglpk-java(3) libglpk-java overview libglpk-java(3)
NAME
libglpk-java - GNU Linear Programming Kit Java Binding
DESCRIPTION
The GNU Linear Programming Kit (GLPK) package supplies a solver for large scale linear programming (LP) and mixed integer programming
(MIP). The GLPK project is hosted at http://www.gnu.org/software/glpk.
It has two mailing lists:
- help-glpk@gnu.org and
- bug-glpk@gnu.org.
To subscribe to one of these lists, please, send an empty mail with a Subject: header line of just "subscribe" to the list.
GLPK provides a library written in C and a standalone solver. The source code provided at ftp://gnu.ftp.org/gnu/glpk/ contains the docu-
mentation of the library in file doc/glpk.pdf.
The Java platform provides the Java Native Interface (JNI) to integrate non-Java language libraries into Java applications.
Project GLPK for Java delivers a Java Binding for GLPK. It is hosted at http://glpk-java.sourceforge.net/.
To report problems and suggestions concerning GLPK for Java, please, send an email to the author at xypron.glpk@gmx.de.
ARCHITECTURE
A GLPK for Java application will consist of the following
- the GLPK library
- the GLPK for Java JNI library
- the GLPK for Java class library
- the application code.
GLPK LIBRARY
The GLPK library can be compiled from source code. Follow the instructions in file INSTALL provided in the source distribution. Precompiled
packages are available in many Linux distributions.
The usual installation path for the library is /usr/local/lib/libglpk.so. The library has to be in the search path for binaries.
GLPK FOR JAVA JNI LIBRARY
The GLPK for Java JNI library can be compiled from source code. Follow the instructions in file INSTALL provided in the source distribu-
tion.
The usual installation path for the library is /usr/local/lib/jni/libglpk-java.so. The library has to be in the search path for binaries.
Specify the library path upon invocation of the application, e.g.
java -Djava.library.path=/usr/local/libjni
GLPK FOR JAVA CLASS LIBRARY
The source code to compile the GLPK for Java class library is provided at http://glpk-java.sourceforge.net.
The GLPK for Java class library can be compiled from source code. Follow the instructions in file INSTALL provided in the source distribu-
tion. The usual installation path for the library is /usr/local/share/java/glpk-java.jar.
The library has to be in the CLASSPATH. Specify the classpath upon invocation of the application, e.g.
java -classpath /usr/local/share/java/glpk-java.jar;.
SEE ALSO
Further documentation and examples can be found in the documentation path, which defaults to /usr/local/share/doc/libglpk-java.
version 1.0.18 September 10th, 2011 libglpk-java(3)